It's fair to worry about another sort of adversarial planning: what if you are a human who is deemed undesirable to the state, and solicit advice from an AI doctor that is backdoored to take correct action as defined by the state? There's now extensive databases on who specifically should be eliminated, but direct removal is going poorly and offending bystanders. So why not subvert the Hippocratic oath? Machines don't even know who that is.

"Turns out the statistically best choice for prediabetes for your patient group is to rely more heavily on soft drinks, but only in wild outbursts punctuated by fasting!"